CVE-2022-50510: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50510 is a vulnerability discovered in the Linux kernel related to a hotplug callback leak in the armsmmuv3 PMU initialization. The issue occurs when armsmmupmuinit() fails to remove the callback added by cpuhpsetupstatemulti() when platformdriver_register() fails (NVD, Ubuntu).

The vulnerability specifically involves the perf/smmuv3 component where armsmmupmuinit() doesn't properly handle cleanup when platformdriverregister() fails. The issue is similar to a previous vulnerability fixed in armccninit() through commit 26242b330093 ("bus: arm-ccn: Prevent hotplug callback leak"). The fix involves adding proper cleanup using cpuhpremovemultistate() in the failure path (NVD).

The vulnerability could lead to resource leaks in the Linux kernel when initializing the ARM SMMU PMU component. This affects systems using the ARM SMMU v3 architecture (Ubuntu).

The issue has been fixed in various Linux distributions. Ubuntu has released patches for multiple versions including Ubuntu 20.04 LTS (Focal) and 18.04 LTS (Bionic). The fix involves proper cleanup of hotplug callbacks in the failure path of armsmmupmu_init() (Ubuntu).